Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/47173b78-e3b2-3c1a-975a-e4299f961072.roa
File:                     47173b78-e3b2-3c1a-975a-e4299f961072.roa (raw, json)
Hash identifier:          9mhrjjxJYhyTMGB4E/5jUYYDlB5eV99t3rX3eJ6TwDc=
Subject key identifier:   6E:06:9E:FC:1D:97:7F:E0:5C:CE:A9:A6:0E:5A:24:60:BC:0F:80:7D
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584917DC375D165221C70FA6B000
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/47173b78-e3b2-3c1a-975a-e4299f961072.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     852
IP address blocks:        185.201.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:37:5d:16:52:21:c7:0f:a6:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=5c2301ce-bba9-4a41-9baf-9c17853aae4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:44:83:33:75:14:37:66:88:1d:a4:8b:ae:8f:
                    6c:b2:16:51:37:fd:00:2e:a3:d4:c3:02:af:f2:55:
                    dd:08:37:a5:f5:e8:13:61:c9:bd:15:5f:f0:33:fe:
                    a1:10:e1:f9:44:11:6a:fd:a5:24:0e:6c:5f:c4:1e:
                    31:87:9f:07:78:72:cc:dd:fb:21:e8:0c:3e:84:48:
                    25:3f:ac:4e:30:a4:93:0a:24:d2:e2:06:e0:ab:a4:
                    66:63:c4:49:a3:1e:ab:93:5f:42:26:de:dc:b1:d2:
                    01:47:05:c4:98:73:49:85:d6:a1:aa:e3:e1:1a:4f:
                    58:b9:63:7c:ab:51:1f:03:91:0f:12:82:dc:95:a8:
                    39:87:c9:c9:d3:a3:fb:cf:7d:c8:b3:71:c9:85:78:
                    28:1f:25:71:d3:f2:00:b4:c2:1b:b0:11:45:9f:e3:
                    69:7f:36:2f:7a:60:b6:bb:bd:59:d7:27:11:13:0c:
                    32:97:c3:1e:e4:85:92:74:6f:3a:b7:02:12:9e:8c:
                    3c:2d:e5:96:88:29:47:07:42:3b:de:0e:15:4f:ca:
                    8a:c4:c6:b8:c3:6f:92:7f:05:80:6e:7d:4d:4d:5b:
                    a0:b0:cf:54:a2:3f:99:70:b8:c5:2b:63:db:66:b0:
                    80:6d:01:59:f2:35:ee:fe:4e:cd:33:14:b7:a5:39:
                    55:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:06:9E:FC:1D:97:7F:E0:5C:CE:A9:A6:0E:5A:24:60:BC:0F:80:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/47173b78-e3b2-3c1a-975a-e4299f961072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.201.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:ae:5e:48:af:70:b7:bd:84:16:1b:2f:d9:f6:13:d0:51:ea:
         c9:1a:6d:43:24:e6:91:a1:0c:7a:ec:4d:b7:73:76:59:29:93:
         1e:37:f9:04:b5:eb:78:e7:0a:15:7b:a6:54:fa:af:f5:d6:3b:
         8f:5e:d0:cc:85:43:96:e1:fd:7d:13:c2:6f:01:69:7d:18:7f:
         08:60:5f:bb:6b:34:8c:a9:ca:ef:74:5e:c3:46:f6:71:b2:e3:
         86:60:7d:60:4e:9a:a2:97:31:68:cd:c1:00:9e:18:13:d7:5b:
         90:36:56:04:aa:a9:0f:e4:b0:23:6c:58:1e:42:99:ce:55:5c:
         34:1c:5a:f9:69:79:d0:49:4b:5d:11:0f:a5:b3:9e:e9:75:18:
         a5:90:67:fd:10:bc:b7:e8:17:e2:9e:d6:0f:0e:18:c6:36:ab:
         81:16:7f:b7:6f:a6:fd:a8:b5:af:fb:01:2f:8a:3e:ce:38:43:
         3a:eb:8e:7c:c7:0b:9b:53:98:a2:96:66:c5:ec:58:77:9d:b1:
         ad:1d:0b:be:5c:f4:3a:5b:be:35:d0:8d:9c:a5:af:26:fb:0a:
         48:b5:0e:3f:92:45:b1:90:c1:05:b6:d7:34:9d:5f:70:41:e6:
         a5:99:ca:14:29:4b:a9:00:44:0b:68:91:85:ea:e9:8d:f5:13:
         c5:e6:3b:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3DddFlIhxw+msAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk
NWMyMzAxY2UtYmJhOS00YTQxLTliYWYtOWMxNzg1M2FhZTRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0SDM3UUN2aIHaSLro9sshZRN/0ALqPUwwKv
8lXdCDel9egTYcm9FV/wM/6hEOH5RBFq/aUkDmxfxB4xh58HeHLM3fsh6Aw+hEgl
P6xOMKSTCiTS4gbgq6RmY8RJox6rk19CJt7csdIBRwXEmHNJhdahquPhGk9YuWN8
q1EfA5EPEoLclag5h8nJ06P7z33Is3HJhXgoHyVx0/IAtMIbsBFFn+NpfzYvemC2
u71Z1ycREwwyl8Me5IWSdG86twISnow8LeWWiClHB0I73g4VT8qKxMa4w2+SfwWA
bn1NTVugsM9Uoj+ZcLjFK2PbZrCAbQFZ8jXu/k7NMxS3pTlVBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG4Gnvwdl3/gXM6ppg5aJGC8D4B9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNDcxNzNiNzgtZTNiMi0z
YzFhLTk3NWEtZTQyOTlmOTYxMDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucnkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHWuXkivcLe9hBYbL9n2E9BR6skabUMk5pGhDHrsTbdzdlkpkx43+QS1
63jnChV7plT6r/XWO49e0MyFQ5bh/X0Twm8BaX0YfwhgX7trNIypyu90XsNG9nGy
44ZgfWBOmqKXMWjNwQCeGBPXW5A2VgSqqQ/ksCNsWB5Cmc5VXDQcWvlpedBJS10R
D6Wznul1GKWQZ/0QvLfoF+Ke1g8OGMY2q4EWf7dvpv2ota/7AS+KPs44QzrrjnzH
C5tTmKKWZsXsWHedsa0dC75c9DpbvjXQjZylryb7Cki1Dj+SRbGQwQW21zSdX3BB
5qWZyhQpS6kARAtokYXq6Y31E8XmOxI=
-----END CERTIFICATE-----
Generated at Fri Mar 14 08:19:20 2025 by rpki-client